Hack of major data brokers weakens bank authentication

For websites that use KBA for people who have forgotten passwords, Cser recommended also using technology that can identify the accessing device and link it to the customer. Vendors include iovation, ThreatMetrix and 41st Parameter, he said.

Other alternative authentication services include those that specialize in vetting customer-provided data in loan and credit applications and online registration, Cser said. Service providers include ID Analytics.